summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* mariadb: security bump version to 10.1.29Ryan Coe2017-12-142-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | Release notes: https://mariadb.com/kb/en/mariadb-10129-release-notes/ Changelog: https://mariadb.com/kb/en/mariadb-10129-changelog/ Fixes the following security vulnerabilities: CVE-2017-10378 - Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.57 and earlier, 5.6.37 and earlier and 5.7.11 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVE-2017-10268 - Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.5.57 and earlier, 5.6.37 and earlier and 5.7.19 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data. Signed-off-by: Ryan Coe <bluemrp9@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* linux-headers: bump 4.{9, 14}.x seriesFabio Estevam2017-12-141-2/+2
| | | | | Signed-off-by: Fabio Estevam <festevam@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* linux: bump default to version 4.14.6Fabio Estevam2017-12-141-1/+1
| | | | | Signed-off-by: Fabio Estevam <festevam@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* linux: bump CIP version to v4.4.105-cip15Angelo Compagnucci2017-12-141-2/+2
| | | | | | | This patch bumps the Linux CIP version to v4.4.105-cip15. Signed-off-by: Angelo Compagnucci <angelo@amarulasolutions.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* gstreamer1-mm: new packageAdam Duskett2017-12-145-0/+61
| | | | | | | Gstreamermm provides C++ bindings for gstreamer. Signed-off-by: Adam Duskett <aduskett@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* systemd-bootchart: bump to version 233Andrey Yurovsky2017-12-143-34/+2
| | | | | | | | | | This version includes minor fixes and improvements but is otherwise compatible. It does not rely on xlocale.h so we drop that patch (it was merged). Signed-off-by: Andrey Yurovsky <yurovsky@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* package/libupnp18: added upstream sha1 hashBernd Kuhls2017-12-141-0/+2
| | | | | Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* luadbi: new packageFrancois Perrad2017-12-144-0/+25
| | | | | Signed-off-by: Francois Perrad <francois.perrad@gadz.org> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* package/uboot: detect missing user-supplied environment source filesYann E. MORIN2017-12-141-6/+13
| | | | | | | | | | | | | | | | | | | | | | Since 0542bb79e8 (uboot: Support multiple environment source files), missing user-supplied environment source files is no longer detected. This is because we cat them all, and feed the concatenation to the stdin of mkenvimage. So, if one source file is missing, the cat exits in error, but the compound command exits with the exit code of the last command, which is that of mkenvimage, which happens to be happy with whatever it is fed on its stdin, even is empty. We fix that by creating a temporary file, that we even leave afterward for the user to inspect. We also move it out of the _CMDS block and into a macro of its own, so that it is easier to write and maintain. Signed-off-by: "Yann E. MORIN" <yann.morin.1998@free.fr> Cc: Cam Hutchison <camh@xdna.net> Cc: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* libgpgme: bump to version 1.10.0Baruch Siach2017-12-142-3/+8
| | | | | | | | | | Use https download site. Add license hash. Cc: Philipp Claves <claves@budelmann-elektronik.com> Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* gnupg2: bump to version 2.2.3Baruch Siach2017-12-142-5/+5
| | | | | | Cc: Vicente Olivert Riera <Vincent.Riera@imgtec.com> Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* uclibc: Fix system calls on openriscJoel Stanley2017-12-131-0/+80
| | | | | | | | This adds a patch from the master branch that fixes userspace calling through uclibc when making system calls. Signed-off-by: Joel Stanley <joel@jms.id.au> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* package/qt5/qt5scxml: new packageBartosz Bilas2017-12-135-0/+76
| | | | | | Signed-off-by: Bartosz Bilas <b.bilas@grinn-global.com> [Thomas: add entry to DEVELOPERS file.] Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* package/strongswan: Install libraries to /usr/libSam Voss2017-12-131-1/+4
| | | | | | | | Install strongswan ipsec libraries into /usr/lib instead of /usr/lib/ipsec to place them in preferred library common location. Signed-off-by: Sam Voss <sam.voss@rockwellcollins.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* dhcp: add upstream security fixBaruch Siach2017-12-131-0/+51
| | | | | | | | | Fixes socket leak that might cause denial of serivce. https://bugzilla.redhat.com/show_bug.cgi?id=1523547 Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* dhcp: bump to version 4.3.6Baruch Siach2017-12-133-3/+5
| | | | | | | | | Renumber the patch. Add license hash. Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* lynx: new packageMario Lang2017-12-135-0/+54
| | | | | | | | Signed-off-by: Mario Lang <mlang@blind.guru> Reviewed-by: Adrian Perez de Castro <aperez@igalia.com> [Thomas: invert ncurses/slang select to avoid a circular dependency, add BR2_USE_MMU dependency inherited from slang.] Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* webkitgtk: Add license hashesAdrian Perez de Castro2017-12-131-0/+4
| | | | | Signed-off-by: Adrian Perez de Castro <aperez@igalia.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* motion: bump to version 4.1.1Fabrice Fontaine2017-12-134-118/+2
| | | | | | | Remove both patches (merged in version) Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* mpd: add upstream patch to fix build with libupnp 1.6.24Jörg Krause2017-12-131-0/+48
| | | | | | | | | | | | | | | | | | | | | | | | | | Add an upstream patch to fix build with libupnp 1.6.24. libupnp 1.6.24 added some compat helpers for programs making use of libupnp to support 1.6.x and 1.8.x easier [1]. MPD added its own wrappers in version 0.20.12 [2] which are clashing with the newly added compat helpers in libupnp 1.6.24. The patch disables the MPD wrappers for libupnp version 1.6.24+. Fixes: http://autobuild.buildroot.net/results/949bf9d42c82de34f3328a31bb122c81243e5418/ http://autobuild.buildroot.net/results/b12ca93cb3ad52e601cc99f54a867e21a28fd1c9/ http://autobuild.buildroot.net/results/7af8e96fdf823bbc427caa562d6d0a130a4875f0/ .. and many more. Backported from: 78728138a04c2493c6bfadee98060043eca204bf [1] https://sourceforge.net/p/pupnp/code/ci/8177a4195a4d4a5d6cb095eaf4ca5b65ac446381/ [2] https://github.com/MusicPlayerDaemon/MPD/commit/714011c81ed6053f7a35812071499356f337dd70 Signed-off-by: Jörg Krause <joerg.krause@embedded.rocks> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* package/vlc: security bump to version 2.2.8Bernd Kuhls2017-12-134-70/+10
| | | | | | | | | | | | | | | | | | | Version 2.2.7 fixes CVE-2017-10699 http://git.videolan.org/?p=vlc/vlc-2.2.git;a=commitdiff;h=0de56d69ff06afceb5b16721ea5965a676b938b9 Removed patches applied upstream: 0013-codec-avcodec-check-avcodec-visible-sizes.patch http://git.videolan.org/?p=vlc/vlc-2.2.git;a=commitdiff;h=6cc73bcad19da2cd2e95671173f2e0d203a57e9b 0014-decoder-check-visible-size-when-creating-buffer.patch http://git.videolan.org/?p=vlc/vlc-2.2.git;a=commitdiff;h=a38a85db58c569cc592d9380cc07096757ef3d49 Added all hashes provided by upstream, added license hashes. Switched _SITE to https. Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* package/python-wsaccel:switch SITE to httpsBernd Kuhls2017-12-131-1/+1
| | | | | Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* package/python-versiontools: switch SITE to httpsBernd Kuhls2017-12-131-1/+1
| | | | | Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* package/python-ujson: switch SITE to httpsBernd Kuhls2017-12-131-1/+1
| | | | | Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* package/python-shutilwhich: switch SITE to httpsBernd Kuhls2017-12-131-1/+1
| | | | | Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* package/python-pytrie: switch SITE to httpsBernd Kuhls2017-12-131-1/+1
| | | | | Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* package/python-pynacl: switch SITE to httpsBernd Kuhls2017-12-131-1/+1
| | | | | Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* package/python-pyasn-modules: switch SITE to httpsBernd Kuhls2017-12-131-1/+1
| | | | | Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* package/python-ipaddr: switch SITE to httpsBernd Kuhls2017-12-131-1/+1
| | | | | Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* package/python-cheetah: switch SITE to httpsBernd Kuhls2017-12-131-1/+1
| | | | | Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* package/python-characteristic: switch SITE to httpsBernd Kuhls2017-12-131-1/+1
| | | | | Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* package/python-keyring: switch SITE to httpsBernd Kuhls2017-12-131-1/+1
| | | | | | | | Fixes http://autobuild.buildroot.net/results/f73/f7322f19303daa3d403f2c0f13379d947431300d/ Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* DEVELOPERS: re-assign libiio to Paul Cercueil's personal addressThomas Petazzoni2017-12-131-3/+1
| | | | | | | Paul Cercueil's address @analog.com is bouncing, so let's use his personal e-mail address instead for the libiio package. Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* Revert "package/cmake: bump version to 3.10.0 and add license hash"Thomas Petazzoni2017-12-122-5/+4
| | | | | | | | | | | | | | | This reverts commit 65205c2425bccb7039ca0e2caffb7c64c26805f7, which causes too many build failures of host-cmake due to the use by CMake of the emplace_hint C++11 method. Fixes: http://autobuild.buildroot.net/results/90d38169b50c29842ecc1752c2abf66d4c2d9e63/ This new dependency of host-cmake will have to be taken care of in a more complete patch. Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* support/testing: TestATFMarvell needs BR2_TARGET_UBOOT_NEEDS_DTC=yThomas Petazzoni2017-12-121-0/+1
| | | | | | | | | | | | The Marvell U-Boot needs DTC to build, so the test case fails to build on systems where dtc isn't available. We add BR2_TARGET_UBOOT_NEEDS_DTC=y to make sure that we build our own DTC. Fixes: https://gitlab.com/buildroot.org/buildroot/-/jobs/44126707 Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* gnupg: add host packagePeter Korsgaard2017-12-123-0/+26
| | | | | | | | | | | | For E.G. post-build / post-image scripts as it generally cannot be expected to be available on the build host and/or there are some differences in behaviour between gnupg 1.x / 2.x. Provide gnupg 1.x instead of 2.x, as it is simpler to build (less dependencies) and easier to use in post-build / post-image scripts (E.G. no gpg-agent that keeps running in the background). Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* package/linux-tools: fixes build of iio with 4.14+ kernelsJulien BOIBESSOT2017-12-121-0/+2
| | | | | | | | | | | | | | Since Linux kernel commit [1], the build of the iio tool has been changed to use the common Linux tools build system. The installation directory is now given by DESTDIR, like for all other Linux tools. We keep the INSTALL_DIR environment in the 'install' target to be compatible with kernels older than 4.14. [1] https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=18956cf2d78a8d4a5959e20240f04ce8d5a6c121 Signed-off-by: Julien BOIBESSOT <julien.boibessot@armadeus.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* qt5charts: fix qt5base widgets/gui selectionPeter Seiderer2017-12-121-0/+1
| | | | | | | | | | | | | | | | | | Selection of BR2_PACKAGE_QT5BASE_WIDGETS needs BR2_PACKAGE_QT5BASE_GUI too. Fixes qt5base configure failure ([1]): ERROR: Feature 'widgets' was enabled, but the pre-condition 'features.gui' failed. [1] http://autobuild.buildroot.net/results/69c4385b2fd484d16f749b4cde6967f5cabea8b2 and buildroot warning: warning: (... && BR2_PACKAGE_QT5CHARTS && ...) selects BR2_PACKAGE_QT5BASE_WIDGETS which has unmet direct dependencies (BR2_PACKAGE_QT5 && BR2_PACKAGE_QT5BASE && BR2_PACKAGE_QT5BASE_GUI) Signed-off-by: Peter Seiderer <ps.report@gmx.net> Acked-by: Sébastien Szymanski <sebastien.szymanski@armadeus.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* package/cmake: bump version to 3.10.0 and add license hashMario Lang2017-12-122-4/+5
| | | | | Signed-off-by: Mario Lang <mlang@blind.guru> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* pdbg: Bump versionJoel Stanley2017-12-123-65/+2
| | | | | | | | Contains the upstreamed build fix for Blackfin and various other bug fixes. Signed-off-by: Joel Stanley <joel@jms.id.au> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* shairport-sync: bump to version 3.1.5Jörg Krause2017-12-122-2/+2
| | | | | Signed-off-by: Jörg Krause <joerg.krause@embedded.rocks> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* .gitlab-ci.yml: refresh after ATF tests additionThomas Petazzoni2017-12-121-0/+3
| | | | | | | | Fixes: https://gitlab.com/buildroot.org/buildroot/-/jobs/44094313 Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* boards/zynq: use genimage to generate a bootable SD card imagePeter Korsgaard2017-12-116-7/+43
| | | | | | | [Run-time tested on ZedBoard, build-tested on the other boards] [Peter: also add host-dosfstools / host-mtools to make vfat images] Signed-off-by: Luca Ceresoli <luca@lucaceresoli.net> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* boards/zynq: rename the DTB to be loaded by U-BootLuca Ceresoli2017-12-114-0/+14
| | | | | | | | | | | | | | | | | | | We are about to introduce genimage support for the Zynq boards. For all of them U-Boot loads the DTB from a file named "devicetree.dtb" so we need to rename it on the SD card image. We could use genimage itself to rename files while creating the image. But this would require a different genimage.cfg for each board, leading to duplicate code. Instead let's create a "devicetree.dtb" symlink pointing to the dtb listed in the configuration. Currently all the Zynq-based boards have only one DTS configured, but if one had two or more of them, the symlink would point to the first one. [Peter: only create symlink if dtb option is available] Signed-off-by: Luca Ceresoli <luca@lucaceresoli.net> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* zynq_zc706: u-boot: bump to xilinx-v2017.3Luca Ceresoli2017-12-111-1/+1
| | | | | | | [Build-tested only] Signed-off-by: Luca Ceresoli <luca@lucaceresoli.net> Acked-by: Alistair Francis <alistair.francis@xilinx.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* zynq_zc706: linux: bump to xilinx-v2017.3 (based on 4.9)Luca Ceresoli2017-12-111-2/+2
| | | | | | | [Build-tested only] Signed-off-by: Luca Ceresoli <luca@lucaceresoli.net> Acked-by: Alistair Francis <alistair.francis@xilinx.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* zynq_microzed: u-boot: bump to xilinx-v2017.3Luca Ceresoli2017-12-111-1/+1
| | | | | | | [Build-tested only] Signed-off-by: Luca Ceresoli <luca@lucaceresoli.net> Acked-by: Alistair Francis <alistair.francis@xilinx.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* zynq_microzed: linux: bump to xilinx-v2017.3 (based on 4.9)Luca Ceresoli2017-12-111-2/+2
| | | | | | | [Build-tested only] Signed-off-by: Luca Ceresoli <luca@lucaceresoli.net> Acked-by: Alistair Francis <alistair.francis@xilinx.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* zynq_zed: u-boot: bump to xilinx-v2017.3Luca Ceresoli2017-12-111-1/+1
| | | | | | | [Run-time tested] Signed-off-by: Luca Ceresoli <luca@lucaceresoli.net> Acked-by: Alistair Francis <alistair.francis@xilinx.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* zynq_zed: linux: bump to xilinx-v2017.3 (based on 4.9)Luca Ceresoli2017-12-111-2/+2
| | | | | | | [Run-time tested] Signed-off-by: Luca Ceresoli <luca@lucaceresoli.net> Acked-by: Alistair Francis <alistair.francis@xilinx.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
OpenPOWER on IntegriCloud